Skip to content
Noroxi

Community Events

community-events · plugin

Known security vulnerabilities for Community Events. Find out in seconds which version runs on your site with WP Lens.

9 known vulnerabilities

3 critical · 1 with public exploit code · latest Mar 6, 2026

Vulnerabilities

  • CVE-2025-10586

    Community Events <= 1.5.1 - Unauthenticated SQL Injection

    Critical 9.8

  • CVE-2025-10587

    Community Events <= 1.5.1 - Unauthenticated SQL Injection

    Critical 9.8

  • CVE-2015-3313

    SQL injection vulnerability in WordPress Community Events plugin before 1.4.

    Critical 9.8

  • CVE-2025-12646

    Community Events <= 1.5.4 - Unauthenticated SQL Injection

    High 7.5

  • CVE-2025-11995

    Community Events <= 1.5.2 - Unauthenticated Stored Cross-Site Scripting

    High 7.2

  • CVE-2025-14029

    Community Events <= 1.5.6 - Missing Authorization to Unauthenticated Arbitrary Event Approval via 'eventlist' Parameter

    Medium 5.3

  • CVE-2026-2429

    Community Events <= 1.5.8 - Authenticated (Administrator+) SQL Injection via 'ce_venue_name' CSV Field

    Medium 4.9

  • CVE-2022-44742

    WordPress Community Events Plugin <= 1.4.8 is vulnerable to Cross Site Scripting (XSS)

    Medium 4.8

  • CVE-2026-1649

    Community Events <= 1.5.7 - Authenticated (Administrator+) Stored Cross-Site Scripting via 'ce_venue_name' Parameter

    Medium 4.4

← Back to directory